No more get-out-of-jail-free card for CryptXXX ransomware victims

(credit: Aurich Lawson) For the past month, people infected with the CryptXXX ransomware had a way to recover their files without paying the hefty $500 fee to obtain the decryption key. On Tuesday, that reprieve came to an end. Researchers from security firm Proofpoint said in a blog post that version 2.006 has found a way to bypass a decryption tool that has been freely available for weeks. The tool was provided by Kaspersky Lab and was the result of flaws in the way CryptXXX worked. The crypto ransomware update effectively renders the Kaspersky tool useless, Proofpoint said. It did this with the use of zlib , a software library used for data compression. The new version also makes it harder to use the Kaspersky tool by locking the screen of an infected computer and making it unusable until the ransom is paid. Read 2 remaining paragraphs | Comments

Visit link:
No more get-out-of-jail-free card for CryptXXX ransomware victims

3,000-year-old female mummy was covered in hidden tattoos

On the 3,000-year-old mummy’s neck, you can see two seated baboons on either side of a wadjet eye (top row), which is a symbol of protection. 5 more images in gallery Covered in more than 30 tattoos of flowers, animals, and sacred symbols, this 3,000-year-old mummy is one of the most unusual that archaeologist Anne Austin has ever seen. Though other mummies have been found with abstract markings like dots tattooed on their skin, no one had ever seen figurative drawings like these. Austin and her colleagues were stunned. The mummy, found in a village called Deir el-Medina, was once a woman who proudly inked sacred wadjet eyes on her neck, shoulders, and back, lotus blossoms on her hips, and cows on her arm. Her village was home to artisans who worked in the nearby Valley of the Kings, where they would have carved elaborate sculptures and inscriptions for pharaohs and gods. It’s not clear what the tattoos meant nor why this particular woman had so many of them. But Austin speculates that they had religious significance, particularly the eyes and the cows, which may have been a reference to the goddess Hathor. “Any angle that you look at this woman, you see a pair of divine eyes looking back at you,” she told Nature  after presenting her work at the American Association of Physical Anthropologists. She first discovered the tattoos when she saw the eye and baboons clearly visible on the mummy’s neck. Suspecting there might be more, she used infrared imaging to see ink that had penetrated the woman’s skin but was no longer visible due to dark resins used for mummification. This is the same technique that scientists used to discover the tattoos on the body of Ötzi the Iceman , a 5,300-year-old body that was accidentally preserved in ice for thousands of years. Ötzi had more than 60 tattoos created with ash that were entirely abstract, mostly horizontal lines on parts of his body where joint swelling suggests that he would have been suffering pain. When Austin used infrared imaging, she was able to find many tattoos that were previously hidden. The tattoos on the woman’s back became visible, and Austin and her colleagues used image reconstruction software to correct distortions that were introduced when the mummy’s skin shrank over time. Once the tattoos were stretched, she could clearly see the two cows on the woman’s arm and many other images. Some of the tattoos, she says, were in places where it would have been extremely painful to be tattooed, especially because the process would have been very slow in ancient times. They were also clearly created by someone else, since many were on the woman’s back. These facts suggest the tattoos may have had deep cultural significance. There is also evidence that some of the tattoos were faded, so the woman was probably getting new ink for many years as older tattoos faded. Read 1 remaining paragraphs | Comments

View the original here:
3,000-year-old female mummy was covered in hidden tattoos

Piracy site for academic journals playing game of domain-name Whac-A-Mole

Alexandra Elbakyan won’t let her Sci-Hub pirate site of academic journals die— despite publisher Elsevier’s lawsuit. (credit: Courtesy of Alexandra Elbakyan) We reported a few weeks ago on a popular pirate site for science journals whose oversees admin was being sued by one of the world’s leading academic publishers, Elsevier. Elsevier is the same New York publisher that the late Aaron Swartz had noted in his ” Guerilla Open Access Manifesto ” that told academics and researchers they had a “duty” to free the knowledge they were privileged to read behind Elsevier’s paywall. Because of the lawsuit, which Sci-Hub founder Alexandra Elbakyan has refused to participate in, she’s been engaged in a game of domain-name Whac-A-Mole in response to Elsevier winning court orders demanding the shuttering of the popular site’s domain name. The site allows anybody, not just academics, to access tens of millions of scholastic research articles for free. When Ars interviewed Elbakyan and learned that she had a similar philosophy to Swartz, she had already altered the site’s domain from sci-hub.org to sci-hub.io and changed others because of a court order blocking the .org domain. Now that domain, registered with Chinese registrar Now.cn, has also been killed. That has forced the site to move to sci-hub.bz and sci-hub.cc. This cat-and-mouse domain game is reminiscent of the decade-long game the admins of The Pirate Bay have been playing. When one domain gets lost to a court order, the site springs up on another. Read 3 remaining paragraphs | Comments

Follow this link:
Piracy site for academic journals playing game of domain-name Whac-A-Mole

FDA flexes regulatory muscles, says vaping, e-cigs now under its control

(credit: Flickr/ecig click ) The US Food and Drug Administration announced Thursday that it has extended its authority and will now regulate electronic cigarettes, hookah tobacco, cigars, and other tobacco products under the 2009 Family Smoking Prevention and Tobacco Control Act . The regulatory move, first proposed in 2014, is largely aimed at protecting kids from tobacco and nicotine products. The result is that e-cigs and the other products will now be subject to the same federal regulations as regular cigarettes. These regulations include some relatively uncontroversial rules such as a ban on selling e-cigs to minors (which some states have already done), requiring a photo ID to buy e-cigs, not selling e-cigs out of vending machines, and a ban on free e-cig samples. But the regulations also require that e-cigarette manufactures register with the agency and put any new devices through a pre-market regulatory approval process. By “new,” the FDA means any novel devices put on the market after February 15, 2007. Devices released before then will be grandfathered into the regulations. However, in the relatively young e-cig market, the vast majority of current products were introduced after 2007 and will be subject to the approval process. Read 6 remaining paragraphs | Comments

Taken from:
FDA flexes regulatory muscles, says vaping, e-cigs now under its control

ResetPlug is a $60 device to keep you trapped in crappy Wi-Fi hell

If you need this, you probably deserve this. (credit: ResetPlug ) It’s Monday night and you finally collapse into your favorite chair after a day that started at 5:00am. The dogs are crated, the kids are in bed, and your spouse has graciously agreed to do dinner clean-up. You lean your head back and sigh. There’s a whole week’s worth of worry stacked up in your forebrain, but for the next 20 minutes, none of it will matter. The tablet is warm in your hands as you tap the Netflix app, and you smile in anticipation of the one truly good thing that you’ll get to experience today. The theme song is already playing in your head: “Un— BREAKABLE! They’re alive, dammit! It’s a mir -a-cle!” For the next 20 minutes, you can escape. …except you can’t, because instead of transporting you away from your worries, the stupid screen is showing a giant-ass error message: “Netflix is not available.” The vein in your forehead—you know the one, right at your hairline—starts throbbing. You can feel it. You know what comes next. You can already see it in your mind. You’re going to have to go upstairs into your youngest’s room—because for some incredibly insane reason the cable drop is in there, which makes you want to find the person who built the damn house and throttle them to death with six feet of coax—and you’re going to have to reach back under the kid’s bed, over the dust and the dog hair and the Lego bricks and broken Star Wars toys and whatever the hell else is under there and find the damn plug for the damn router. After you unplug and plug it back in, you’re going to have to lie there watching the damn lights on the stupid thing blink for minutes—whole minutes!—while your tiny window of Netflix time slowly trickles away. Read 15 remaining paragraphs | Comments

Continue Reading:
ResetPlug is a $60 device to keep you trapped in crappy Wi-Fi hell

7 million unsalted MD5 passwords leaked by Minecraft community Lifeboat

(credit: Lifeboat ) As security breaches go, they don’t get more vexing than this: 7 million compromised accounts that protected passwords using woefully weak unsalted MD5 hashes, and the outfit responsible, still hadn’t disclosed the hack three months after it came to light. And as if that wasn’t enough, the service recommended the use of short passwords. That’s what Motherboard reported Tuesday about Lifeboat , a service that provides custom, multiplayer environments to gamers who use the Minecraft mobile app. The data circulating online included the e-mail addresses and hashed passwords for 7 million Lifeboat accounts. The mass compromise was discovered by Troy Hunt, the security researcher behind the Have I been pwned? breach notification site. Hunt said he had acquired the data from someone actively involved in trading hacked login credentials who has provided similar data in the past. Hunt reported that some of the plaintext passwords users had chosen were so weak that he was able to discover them simply by posting the corresponding MD5 hash into Google. As if many users’ approach to passwords were lackadaisical itself, Lifeboat’s own Getting started guide recommended “short, but difficult to guess passwords” because “This is not online banking.” Read 3 remaining paragraphs | Comments

More:
7 million unsalted MD5 passwords leaked by Minecraft community Lifeboat

4U Storage Pods offer 240TB of storage for 3.6¢/GB

That’s a lot of hard disks. (credit: Backblaze) For the last few years, we’ve looked at the hard disk reliability numbers from cloud backup and storage company Backblaze, but we’ve not looked at the systems it builds to hold its tens of thousands of hard disks. In common with some other cloud companies, Backblaze publishes the specs and designs of its Storage Pods, 4U systems packed with hard disks, and today it announced its sixth generation design , which bumps up the number of disks (from 45 to 60) while driving costs down even further. The first design, in 2009, packed 45 1.5TB disks into a 4U rackable box for a cost of about 12¢ per gigabyte. In the different iterations that have followed, Backblaze has used a number of different internal designs—sometimes using port multipliers to get all the SATA ports necessary, other times using PCIe cards packed with SATA controllers—but it has stuck with the same 45 disk-per-box formula. The new system marks the first break from that setup. It uses the same Ivy Bridge Xeon processor and 32GB RAM of the version 5, adding extra controllers and port multipliers to handle another 15 disks for 60 in total. The result is a little long—it overhangs the back of the rack by about four inches—but it’s packed full of storage. Read 2 remaining paragraphs | Comments

See the original article here:
4U Storage Pods offer 240TB of storage for 3.6¢/GB

Office up, Surface up, cloud booming in Microsoft’s $20.5 billion quarter

Microsoft posted revenue of $20.5 billion in the third quarter of its 2016 financial year, down 6 percent from the same quarter a year ago. Operating income was $5.3 billion, a 20 percent drop, net income was $3.8 billion, down 25 percent, and earnings per share were $0.47, a 23 percent decline. Over the past few quarters, Microsoft and other tech companies have reported significant impact from the high value of the US dollar, and have offered equivalent financial figures that show what their numbers would have been had the value of foreign earnings not been eroded by this conversion. This currency impact was estimated as reducing revenue by about $0.8 billion. The company also reports that there was a $1.5 billion impact from a combination of revenue deferrals due to Windows 10 upgrades and restructuring charges. Excluding this impact, and assuming constant currency values, the company says that its revenue was $22.1 billion (up 5 percent), operating income was $6.8 billion (up 10 percent), and net income was $5.0 billion (up 6 percent). The commercial cloud annualized revenue run rate—the forecast number that former Steve Ballmer dismissed as ” bullshit “—crept up to $10.0 billion; three months ago, it was estimated at $9.4 billion. Read 8 remaining paragraphs | Comments

Read More:
Office up, Surface up, cloud booming in Microsoft’s $20.5 billion quarter

Volkswagen makes it official—it’s buying back 500,000 2.0L diesels

(credit: Spanish Coches ) In San Francisco this morning, US District Judge Charles Breyer said Volkswagen Group would buy back nearly 500,000 2.0L diesel vehicles which were discovered in September to have software that illegally disabled the emissions control system during normal driving conditions. VW Group is facing some 600 lawsuits that Judge Breyer is overseeing collectively, and the German automaker was compelled by court order to present a plan for fixing the faulty vehicles by today. Specifics of the plan will be hammered out in the coming months. Volkswagen will also set up a fund for people who bought certain diesel Jettas, Golfs, Passats, Beetles, and Audi A3s after 2009. Breyer said this would offer customers “substantial compensation,” on top of the car buyback . Read 7 remaining paragraphs | Comments

Taken from:
Volkswagen makes it official—it’s buying back 500,000 2.0L diesels

Windows 10 Anniversary Update: Google’s WebM and VP9 codecs coming to Edge

The Windows 10 Anniversary Update, due this summer, will expand the range of video and audio codecs that are supported by the Edge browser. Microsoft is adding the VP9 video codec, the Opus audio codec, and the WebM container format . VP9 and WebM are both spearheaded by Google. Google bought video codec company On2 in 2010 with the intent of opening up On2’s VP8 codec to serve as an open source, royalty-free alternative to the open but royalty-incurring H.264. Unfortunately, groups claiming to have patents that covered VP8 emerged. Google ultimately came to an agreement with those groups in 2013 to ensure the codec’s royalty-free status, but by then, H.264 was too firmly entrenched to displace. VP9 is a successor to VP8 that is more efficient and essential for the growing demand for 4K video. Along with Microsoft and others, Google has joined the Alliance for Open Media  to promote VP9’s development and try to ensure that it remains royalty-free. As with VP8 before it, VP9 is covered by patents, but the companies hope that they own all the relevant patents and hence are in a position to grant a royalty-free license. Microsoft announced in September 2015 that it was starting work on VP9 for Edge. Read 4 remaining paragraphs | Comments

Continue reading here:
Windows 10 Anniversary Update: Google’s WebM and VP9 codecs coming to Edge